Users with slow connections (or slow uploading connections, which is most cable modem users), good news:
The invalid credentials bug is fixed. I was generating the next session's challenge before sucking the uploaded image, which could take longer than the challenge is good for.
Now it's done at the very end, so the bug won't come up.
